3 ms·
> With google play store, an _update_ to an app needs to be signed with the same keys as the original app. Sure, just like how if you let's say own Google Pla
by capableweb 5y ago
> With google play store, an _update_ to an app needs to be signed with the same keys as the original app.
Sure, just like how if you let's say own Google Play Store and own those updating keys, you can change it (selectively most likely) to skip checking the signed updates.
They own the full pipeline so if they want, you really stand no chance unless you're running your own OS.
- twobitshifter 5y agoThis happens on the OS level not play store.You can see it yourself if you try to install a release version over a debug version on your phone.
- rocqua 5y ago> Sure, just like how if you let's say own Google Play Store and own those updating keys The ENTIRE POINT, of this scare is that currently, google does not have access to those keys, developers do. And the signatures on these apps are checked by the OS, not the play store. Notably, google can't change the OS on my phone at their whim. They'd need to release a new version and get Samsung (and maybe my carrier) to ship that OS to me.